checkmate5 5.1.0.dev1__py3-none-any.whl → 5.1.0.dev2__py3-none-any.whl

checkmate/contrib/plugins/iac/tfsec/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import TfsecAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'tfsec':
-        {
-            'name': 'tfsec',
-            'title': 'tfsec',
-            'class': TfsecAnalyzer,
-            'language': 'iac',
-            'issues_data': issues_data,
-        },
-}

checkmate/contrib/plugins/java/semgrepjava/analyzer.py

@@ -1,96 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class SemgrepjavaAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(SemgrepjavaAnalyzer, self).__init__(*args, **kwargs)
-        try:
-            result = subprocess.check_output(
-                ["semgrep", "--version"],stderr=subprocess.DEVNULL).strip()
-        except subprocess.CalledProcessError:
-            logger.error(
-                "Cannot initialize semgrep analyzer: Executable is missing, please install it.")
-            raise
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        tmpdir = "/tmp/"+file_revision.project.pk
-
-        if not os.path.exists(os.path.dirname(tmpdir+"/"+file_revision.path)):
-            try:
-                os.makedirs(os.path.dirname(tmpdir+"/"+file_revision.path))
-            except OSError as exc:  # Guard against race condition
-                if exc.errno != errno.EEXIST:
-                    raise
-        f = open(tmpdir+"/"+file_revision.path, "wb")
-
-        fout = tempfile.NamedTemporaryFile(suffix=".json", delete=False)
-        result = {}
-        try:
-            with f:
-                try:
-                  f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                  pass
-            try:
-                result = subprocess.check_output(["semgrep",
-                                                  "--config",
-                                                  "/root/find_sec_bugs.yml",
-                                                  "--no-git-ignore",
-                                                  "--json",
-                                                  f.name],
-                                                  stderr=subprocess.DEVNULL).strip()
-                
-            except subprocess.CalledProcessError as e:
-                if e.returncode == 4:
-                    result = e.output
-                elif e.returncode == 3:
-                    result = []
-                    pass
-                else:
-                    result = e.output
-                    pass
-
-            
-            try:
-                json_result = json.loads(result)
-
-                for issue in json_result['results']:
-
-                    location = (((issue['start']['line'], None),
-                                 (issue['start']['line'], None)),)
-
-                    if ".java" in file_revision.path or ".jsp" in file_revision.path or ".scala" in file_revision.path:
-                        val = issue['check_id']
-                        val = val.replace("root.","")
-                        val = val.title().replace("_","")
-
-                        issues.append({
-                            'code': val,
-                            'location': location,
-                            'data': issue['extra']['message'],
-                            'file': file_revision.path,
-                            'line': issue['start']['line'],
-                            'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue['extra']['message'])
-                        })
-            except:
-                pass
-
-        finally:     
-            return {'issues': issues}

checkmate/contrib/plugins/java/semgrepjava/issues_data.py

@@ -1,5 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-issues_data = {
-}

checkmate/contrib/plugins/java/semgrepjava/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import SemgrepjavaAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'semgrepjava':
-        {
-            'name': 'semgrepjava',
-            'title': 'semgrepjava',
-            'class': SemgrepjavaAnalyzer,
-            'language': 'java',
-            'issues_data': issues_data,
-        },
-}

checkmate/contrib/plugins/javascript/semgrepeslint/analyzer.py

@@ -1,95 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class SemgrepeslintAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(SemgrepeslintAnalyzer, self).__init__(*args, **kwargs)
-        try:
-            result = subprocess.check_output(
-                ["semgrep", "--version"],stderr=subprocess.DEVNULL).strip()
-        except subprocess.CalledProcessError:
-            logger.error(
-                "Cannot initialize semgrep analyzer: Executable is missing, please install it.")
-            raise
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        tmpdir = "/tmp/"+file_revision.project.pk
-
-        if not os.path.exists(os.path.dirname(tmpdir+"/"+file_revision.path)):
-            try:
-                os.makedirs(os.path.dirname(tmpdir+"/"+file_revision.path))
-            except OSError as exc:  # Guard against race condition
-                if exc.errno != errno.EEXIST:
-                    raise
-        f = open(tmpdir+"/"+file_revision.path, "wb")
-
-        fout = tempfile.NamedTemporaryFile(suffix=".json", delete=False)
-        result = {}
-        try:
-            with f:
-                try:
-                  f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                  pass
-            try:
-                result = subprocess.check_output(["semgrep",
-                                                  "--config",
-                                                  "/root/eslint.yml",
-                                                  "--no-git-ignore",
-                                                  "--json",
-                                                  f.name],
-                                                  stderr=subprocess.DEVNULL).strip()
-                
-            except subprocess.CalledProcessError as e:
-                if e.returncode == 4:
-                    result = e.output
-                elif e.returncode == 3:
-                    result = []
-                    pass
-                else:
-                    result = e.output
-                    pass
-
-            
-            try:
-                json_result = json.loads(result)
-
-                for issue in json_result['results']:
-
-                    location = (((issue['start']['line'], None),
-                                 (issue['start']['line'], None)),)
-
-                    if ".js" in file_revision.path or ".ts" in file_revision.path:
-                        val = issue['check_id']
-                        val = val.replace("root.","")
-                        val = val.title().replace("_","")
-
-                        issues.append({
-                            'code': val,
-                            'location': location,
-                            'data': issue['extra']['message'],
-                            'file': file_revision.path,
-                            'line': issue['start']['line'],
-                            'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue['extra']['message'])
-                        })
-            except:
-                pass
-
-        finally:
-            return {'issues': issues}

checkmate/contrib/plugins/javascript/semgrepeslint/issues_data.py

@@ -1,6 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-issues_data = {
-
-}

checkmate/contrib/plugins/javascript/semgrepeslint/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import SemgrepeslintAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'semgrepeslint':
-        {
-            'name': 'semgrepeslint',
-            'title': 'semgrepeslint',
-            'class': SemgrepeslintAnalyzer,
-            'language': 'javascript',
-            'issues_data': issues_data,
-        },
-}

checkmate/contrib/plugins/perl/graudit/analyzer.py

@@ -1,70 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class GrauditAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(GrauditAnalyzer, self).__init__(*args, **kwargs)
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        result = ""
-        f = tempfile.NamedTemporaryFile(delete=False)
-        try:
-            with f:
-                try:
-                  f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                  pass
-            try:
-                result = subprocess.check_output(["/root/graudit/graudit",
-                                                  "-d",
-                                                  "/root/graudit/signatures/perl.db",
-                                                  f.name],
-                                                  stderr=subprocess.DEVNULL).strip()
-            except subprocess.CalledProcessError as e:
-                pass
-            try:
-                json_result = json.loads(result)
-            except ValueError:
-                json_result = {}
-                pass
-
-            try:
-                for issue in json_result:
-                  line = issue["line"]
-                  line = int(line)
-                  location = (((line, line),
-                             (line, None)),)
-
-                  if ".pl" in file_revision.path:
-                    issues.append({
-                      'code': "I001",
-                      'location': location,
-                      'data': issue["data"],
-                      'file': file_revision.path,
-                      'line': line,
-                      'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue["data"])
-                    })
-
-            except KeyError:
-                pass
-
-        finally:
-            os.unlink(f.name)
-        return {'issues': issues}
-

checkmate/contrib/plugins/perl/graudit/issues_data.py

@@ -1,8 +0,0 @@
-issues_data = {
-    "I001": {
-        "title": "Perl insecurity",
-        "description": "%(issue.data)s",
-        "severity": 3,
-        "categories": []
-    }
-}

checkmate/contrib/plugins/perl/graudit/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import GrauditAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'graudit':
-        {
-            'name': 'graudit',
-            'title': 'graudit',
-            'class': GrauditAnalyzer,
-            'language': 'perl',
-            'issues_data': issues_data,
-        },
-}

checkmate/contrib/plugins/python/bandit/analyzer.py

@@ -1,74 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class BanditAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(BanditAnalyzer, self).__init__(*args, **kwargs)
-        try:
-            result = subprocess.check_output(["bandit", "--version"],stderr=subprocess.DEVNULL).strip()
-        except subprocess.CalledProcessError:
-            logger.error(
-                "Cannot initialize Bandit analyzer: Executable is missing, please install it.")
-            raise
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        f = tempfile.NamedTemporaryFile(delete=False)
-        try:
-            with f:
-                try:
-                  f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                  pass
-            try:
-                result = subprocess.check_output(["bandit",
-                                                  f.name,
-                                                  "-f",
-                                                  "json"],
-                                                  stderr=subprocess.DEVNULL).strip()
-            except subprocess.CalledProcessError as e:
-                if e.returncode == 2:
-                    result = e.output
-                    pass
-                elif e.returncode == 1:
-                    result = e.output
-                    pass
-                else:
-                    result = []
-                    pass
-
-            json_result = json.loads(result)
-
-            for issue in json_result['results']:
-
-                location = (((issue['line_number'], None),
-                             (issue['line_number'], None)),)
-
-                if ".py" in file_revision.path:
-                    issues.append({
-                        'code': issue['test_id'],
-                        'location': location,
-                        'data': issue['issue_text'],
-                        'file': file_revision.path,
-                        'line': issue['line_number'],
-                        'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue['issue_text'])
-                    })
-
-        finally:
-            os.unlink(f.name)
-        return {'issues': issues}